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Abstract 

We study generalisations to totally real fields of the methods origi- 
nating with Wiles and Taylor-Wiles ([32], [31 J. In view of the results 
of Skinner- Wiles on elliptic curves with ordinary reduction, we focus 
here on the case of supersingular reduction. Combining these, we then ob- 
tain some partial results on the modularity problem for semistable elliptic 
curves, and end by giving some applications of our results, for example 
proving the modularity of all semistable elliptic curves over Q(\/2). 

1 Introduction 

Let E denote an elliptic curve over a totally real number field F. We say that 
E is modular if there is a Hilbert modular form / over F of parallel weight 

2 (i.e., the corresponding automorphic representation has weight 2 at every 
infinite place) such that the Galois representation associated to E via its ^-adic 
Tate module is isomorphic to an £-adic representation associated to / (see [2] 
and [H]). 

The approach is now standard, and originated in [321] and [31 j : one considers 
the case I = 3, uses the Langlands-Tunnell Theorem to show that the reduc- 
tion ~p E 3 is modular, and then proves that every (suitably constrained) lift to 
characteristic is modular. 

Historically, the easier case has been where ~p E 3 is irreducible. In this case, 
the deformation theory is now well understood, and this was the only case 
needed by Wiles and Taylor- Wiles ([32], [SI]). Over totally real fields, Fujiwara 
circulated a manuscript [11] some years ago, proving an important generalisa- 
tion of the method of Taylor- Wiles, and announcing a proof of the modularity 
of certain elliptic curves over totally real fields. However, there are several hy- 
potheses appearing in his main theorem which we hope partially to eliminate in 
this work. Subsequently, Skinner and Wiles |26j have proven the modularity in 
many 'nearly ordinary' cases. 

In the case where ~p E 3 is reducible, Skinner and Wiles [35] have developed 
new techniques to demonstrate modularity of elliptic curves (and more general 
Galois representations) over totally real fields, although these results depend on 
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certain hypotheses on cyclotomic extensions of F. Since the first version of this 
article was written (2002-3), Kisin has also found stronger results (see [14] ■ |15j). 

Reduction to the semistable case 

We first remark that the modularity of all elliptic curves over totally real fields 
may be reduced to proving the modularity of all semistable elliptic curves 
over totally real fields. The argument is simple; by an explicit version of the 
semistable reduction theorem (see, for example, Lemma 2.2), an elliptic 
curve E over a totally real field F attains semistable reduction over a finite 
soluble totally real Galois extension F'/F. (Note that F' /F will be ramified 
at any prime of F at which E has additive reduction.) The modularity of E/p 
then follows from the modularity of E/pi using base-change techniques. This 
argument is well-known to experts, so we omit it here. 

For this reason, we restrict attention to semistable curves, and try to prove 
modularity. In view of some of the applications in mind, we focus in this pa- 
per on the easiest case, where the ramification conditions on the field are as 
strong as possible, but the methods should apply more generally. Because of 
the results already obtained in the reducible and ordinary cases, we focus on 
the supersingular case in this paper. 

Applications 

As we are able to prove the modularity of more elliptic curves than was previ- 
ously known, we can therefore improve certain results in the literature. Follow- 
ing Wiles's methods ([32]), we try to find fields for which we can prove mod- 
ularity of all semistable curves. Wiles ([32], chapter 5) uses a switch between 
the primes 3 and 5, which depends on the finiteness of Xo(15)(Q); however 
Xo(15)(F) will generally not be finite. Other restrictions on the field also be- 
come apparent in generalising directly his methods. However, we are able to 
prove modularity of all semistable elliptic curves for the quadratic fields Q(\/2) 
and Q(vl7). That we can prove such results for the first of these fields is a 
piece of good fortune; the first author and Paul Meekin ([32]) have shown that 
a generalisation of Fermat's Last Theorem to Q(v2) would follow from such a 
result. They also show that Q(v2) is the only real quadratic field for which an 
implication of the form 'modularity implies Fermat' can be derived directly. 

Notation 

The absolute Galois group of a field F is written either as Gal(F/F) or Gf ■ The 
separable algebraic closure of F is denoted by F. Given an extension of fields 
K D F and some representation p : Gf — > GL2(*), we denote the restriction of 
p to the absolute Galois group of K by either p\g k or, simply, by p\x- If F is a 
number field, we denote the decomposition and inertia groups at a place v by 
D v and respectively. 

Throughout, I is an odd prime. We denote the ^-adic cyclotomic character 
by €£, and its reduction, the mod £ cyclotomic character, by q. We denote by 
u>2 the second fundamental character of Qi. Recall that 0J2 '■ h — * F? 2 is the 
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unique character of the inertia subgroup Ig given by the rule 

T " £l/(^ 2 -l) ' 

The notation suppresses the dependence on £, and it would be more appropriate 
to write u>2.e instead; the context should be generally clear. One should recall 
that the notion of fundamental character is not functorial; the restriction of w 2 
to a local inertia group is not the second fundamental character of F v when 
the ramification degree of F v /Qi is greater than 1. We remark that there is 
an injection F^ 2 <— > GL 2 (Ff); it follows that we can view w 2 as a 2-dimensional 
representation f2 2 over Fg . This representation is irreducible over Ff , but if we 
extend scalars to a coefficient field of even degree over F^, then fi 2 becomes 
reducible, isomorphic over this quadratic extension to the direct sum of the 
characters tt> 2 and w 2 . 

For an elliptic curve E over a field F, we denote by E[n) the kernel of the 

multiplication by n map E ^> E. If n is coprime to the characteristic of F, 

PE.n - g f — > AutE[n](F) = GL 2 (Z/nZ) 

is the mod n representation. If £ is a prime different from the characteristic of 
F, we set 

PE,e ■■ G F — ► IimAut£[r](F) S GL 2 (Z £ ). 
Summary of results 

Let F be a totally real number field, and let I be an odd prime. Suppose that 
for all v\£, the ramification index of F v /Qg is at most £—\. Consider continuous, 
irreducible representations 

p : Gal(F/F) — ► GL 2 (Q £ ) 

with determinant the £-adic cyclotomic character, and having the same abso- 
lutely irreducible residual representation p. We assume that all Artinian quo- 
tients of p are finite flat at primes above £, and we assume further that 

p\i v ~ 02|j„ for every v\£ 

where f2 2 is the second fundamental character of Q^, as in the notation section 
above, regarded as a 2-dimensional representation - as our coefficient field has 
residue field containing F^2, the representation splits as w 2 ffi wf. This is the 
form of the local Galois representations associated to an elliptic curve with 
good supersingular reduction at v, where F v is unramified over <Qe. (If F v is not 
unramified, however, the local Galois representation may take a different form; 
see section [7] for an example.) The main applications of the results of the paper 
will be to such elliptic curves. 
Our main result is then: 

Theorem 1.1 Let p be a representation of the above form. Suppose that ~p has 
a modular lift which is finite flat at primes above £. Assume that 

p\g^(f/f(q)) 

is absolutely irreducible, and furthermore assume that 
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• if £ = 5 and Proj p| Gal (i? /F(Cf) ) - A 5 then [F(Q) : F] = 4. 
Then p is also modular. 

We give two applications of the above. The first relates to Serre's conjecture 
for mod 7 representations; we extend the result in [17], and show that: 

Theorem 1.2 Letjj : Gal(Q/Q) — > GL2(F7) be an absolutely irreducible, con- 
tinuous, odd representation. Suppose that the projective image of inertia at 3 
has odd order and that the determinant of 15 restricted to the inertia group at 7 
has even order. Then ~p is modular. 

This theorem has been used by Dieulefait and the second author [5] to give 
a new criterion for the modularity of rigid Calabi-Yau threefolds. Of course, it 
is largely subsumed within recent work of Khare and Wintenberger; however, 
we need no hypothesis at 2. 

Our second application relates to the modularity of elliptic curves over totally 
real fields. For general totally real fields, we prove modularity subject to quite a 
few restrictions. For the full result, see section [5] A particularly neat corollary 
is the following. 

Theorem 1.3 Every semistable elliptic curve over Q(\/2) is modular. 

This has implications for the study of certain Diophantine equations, and no- 
tably the Fermat equation, over Q(V2) (see [12]). 

2 Local deformations and cohomology groups 

Our objective in this section is to give good upper bounds on the size of certain 
local cohomology groups. We do this for representations of a certain shape 
(which can be achieved after an unramified base change). But before that, we 
begin by setting out our notation. Apart from £ being the residue characteristic 
and A being a uniformizer (instead of p and 7r) , our choice of notation is meant 
to be consistent with 

Throughout this section, we fix a finite field k of characteristic £ > 3. We 
denote by A its Witt ring W(k) and by K the fraction field of A. We fix a finite 
totally ramified Galois extension K' of K and denote by A' its ring of integers. 
We assume that the absolute ramification index e = \K' : K] is less than or 
equal to £ — 1. The reason for this is that there is then a good notion of Honda 
system associated to group schemes. We also fix throughout a uniformizer A 
such that A e = e£ with e £ A x (as K' is a tamely ramified extension). Write m 
for the maximal ideal of A' . 

We denote by a the Frobenius automorphism of A, and by Dk the Dieudonnc 
ring. Recall that Dk is the A-algebra generated by F and V subject to the usual 
relations FV = £ = VF, Fa = a{a)F, Va = cf- 1 (a)V (for a € A). If there is 
no cause for confusion, we will abbreviate Dk to simply D. 

Various tensor products appear in this section. The unspecified — <X> — will 
simply mean — ®z t —■ 

We shall be working with finite Honda systems over A' . For the various 
properties, see Conrad ([3] and [1]). 
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We now fix a second finite field F of characteristic I and a continuous repre- 
sentation 

P '■ Gk> — > GL 2 (F). 

We will shortly impose a further restriction, but for the moment we assume 
that the representation is finite — that is, there is a finite flat group scheme 
over A' whose associated Galois module (from the generic fibre) gives precisely 
our representation p. This allows us to introduce certain cohomology groups 
Hj(GK', adp) and Hj (Gk 1 , ad p) . We recall the definitions (see [5] for details): 
elements of Hj(Gic', adp) are the deformations of p to F[e]/ (e 2 ) which are finite, 
and Hj (Gk 1 , ad°p) is the subspace of Hj(Gi(' , adp) with determinant (of the 
deformation) equal to the determinant of p. 

We now impose a restriction on the shape of p: 

Assumption 2.1 p is equivalent to f^G" , . 

Let M be the D k ® F-module 

(fc(giF)ei 8 (fc(g)F)e 2 

with F and V actions given by 

F(ei)=0, F(e 2 ) = ei; 
V(e 1 )=0, V(e 2 ) = -e 1 . 

(To be more precise, these give the action on our basis elements which one then 
extends Frobenius semi-linear ly.) Let L be the subspace (fc<g>F)e2. Then (L, M) 
is the finite Honda system over A associated to fl2\a K - This follows, after base 
change (see Section 4 of [3]), from the description of the Honda system over %i 
associated to r2 2 ■ (This is presumably well known, but a proof is given in the 
appendix.) We reserve (L,M) for this particular Honda system throughout. 

By the results of [3], calculating HjiGx 1 , adp) is the same as calculating 
extensions of (L, M) by itself in the category of finite Honda systems over A'. 
As a first step to this calculation, we investigate the extensions of M by itself 
in the category of Dk <8> F modules. 

We begin with a technical lemma which enables us to reduce calculations to 
one of linear algebra. 

Lemma 2.2 Let R be a ring with finite cardinality. If 

— > R m — >U — ► R n — > 

is an exact sequence of R— modules, then U is free and isomorphic to R n+m . 

Proof. The exact sequence implies that U can be generated by n + m elements. 
Hence there is a surjective i?-module homomorphism R n + m _» JJ. As R has 
finite cardinality, we get R n + m = JJ. □ 

Proposition 2.3 The group of extensions Ext D ^ V (M,M) is (non-canonically) 
isomorphic as an F '-vector space to 

• (k <g> F) © (F^ <g) F) if the degree [k : ¥ e ] is odd, and 

• (k <g> F) © (Fp ® F) if the degree [k : ¥ e ] is even. 
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Proof. By Lemma 
module, to be 



we can certainly take any extension class, as an A ® F 



M 



®M= ((fc ® F)(ei, 0) © (fc <g> F)(e 2 , 0)) © ((fc <g> F)(0, e x ) (fc $ F)(0, e 2 ) 



We need to specify the actions of F and U. In order to do this, we write down 
matrices using the above choice of basis and compute (remembering to keep 
track of Frobenius semi- linearity) . 
To begin with, we can write 



F = 



fo i A M 
00/3/4 
0001 

\o / 



and V = 








-1 vi v 2 \ 

v 3 Vi 

0-1 

/ 



Since FV = VF = i = 0, we must have the following equalities: 



1\ fa( Vl ) <j(v 2 ) 



-1 




0J \a(v 3 ) a( Vi ) 



fi h 

Vi v 2 
V 3 V4 



-1 





1 




Multiplying out, we find that 

fz = «3 = 0, and fx = a(v 4 ), f 4 = a(vi). 

We now reduce the number of variables further by applying appropriate 
k (g> F-linear automorphisms of M © M. Let A be the endomorphism 

1 1 ai a 2 \ 

1 0,3 0,4 

10' 

\0 1 / 

To calculate AFA -1 , we need to calculate 



ai a 2 
a 3 a 4 



1 




1\ /<r(ai) a(a 2 ) 



Oy \cr(a 3 ) (1(04) 



h h 
h 



which is 



-cr(a 3 ) ai - cr(a 4 ) 
a 3 



h h 
fi 



We can thus assume that fi = fi = 0, which implies that v\ 
assumption, our choice of A is then restricted to 

a 3 = and a\ = o~(ai). 

To calculate AVA -1 , we need to compute 



0. Under this 



ai a 2 
04 



-1 




-1 




a 1 (a x ) a 1 (a 2 ) 
a- 1 (a 4 ) 



w 2 
tu 



G 



which is 

'0 -a 1 + cr- 1 (a 4 )\ (0 v 2 
v J + \0 v 4 

Since we have a\ = a{a 4 ), our choice v 2 € k ® F can further be restricted to a 
choice of representative of an element of 

fc(g)F 



(a 2 - l)(fc<g>F)' 



while i>4 can be chosen to be an arbitrary element of k ® F. The proposition 
then follows. □ 



Theorem 2.4 The dimension of Hj(Gx' , ad p) as an ¥-vector space is at most 

• [K 1 : Qi\ + 2 if [k : ¥ e ] is even, and 

• [K 1 : Qe] + 1 if [k : ¥ t ] is odd. 

Proof. As in [3] , we have an F-linear map of vector spaces 

t : H}(G K >,ad~P) — ► Ext 1 (M,M). 

In words, the map t is just 'take Dieudonne module of the special fibre of the 
associated finite flat group scheme'. We already have a bound for the Ext-group, 
thanks to Proposition ^. 31 We now start analysing the kernel of the above linear 
map. 

We begin by describing the structure of the yl'-module Ma> ■ We recall the 
definition (due to Fontaine) , and refer to [3] for the explicit description we need 
(see Definition 2.1 of [3]). As already set out in the beginning of this section, 
we have a fixed uniformizer A of A! satisfying A e = el with e G A x . 

We have the standard identification of = (A, a) ®a M with M as an 

abelian group and twisted ^4-action. The Dieudonne module structure then 
gives us two A-linear maps 

F : M (1) — ► M and V : M — > M {1) . 

(As in :3], we shall not abbreviate these to F and V.) There are A'-linear maps 

F M :A'® A M {1) — >A'® A M and V M :m® A M — >tT x ra.® A M { V 

obtained simply by tensoring with the identity map on A' and the map x — + t~ x x 
respectively. 

The A'-module M A ' is then the quotient of 

(A' ® A M) © (r x m ® A AfW) 

by the submodule 

{(^(«) - F M (w),(j>¥(w) - V M (u)) I u € m®A Af, w € A' ® A M (1 ^ 

where ipQ 1 , <f>i are the maps 

(f)^ 1 :m(g> A M — > A' ® A M and <f>f : A' ® A M {1) — > i^m ® A M (1) 
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induced by the inclusions m A' and A' £ 1 m. 

A basis of A' ®a M as a free k £§> F-module is given by 

X i <Siej, i = 0, ...e- l,j = 1,2. 

For £ -1 tn ®a M^ x \ we have the k ® F basis 

A _i (g)ej, i = 0, l,...e- l,j = 1,2. 

Note that for i > 1, the elements (A 1 ® ei,0) are trivial in Ma>- Indeed, we 
have 

(A 1 ei , 0) = (4 1 (A* ® ei ) - F M (0) , - V M (A* <g> e a )) . 
Furthermore, for i > 1, we have 

(0,A-*®ei) = (0,0- V M {X e - l ®e 2 )) 
= (-A e - 4 ®e 2 ,0). 

Note also that 

(0,l®ei) - (^(0)-F M (l® ei ),^f (1 ® ei) - F M (0)) , and 
(0,l®e a ) - (l®e x ,0)+ (>f (0)-F M (l®e 2 ),^f (1 ® e 2 ) - V M (0)) . 
Thus any element in Ma> can be expressed as an k ® F-linear combination of 
(l®ei,0),(A l ®e 2 ,0) and (0,A~ m ®e 2 ) 

with i = 0, 1, . . . e — 1 and m = 1, ... e — 1. Since the A'-length of Ma' is the 
same as the A-length of M times e (Lemma 2.2 of [3]), we deduce that the set 
of generators above is in fact a basis. 

Obviously, the A'-submodule of Ma> obtained by taking the A'-span of L is 
precisely A' (g>A A ® F(e 2 ,0). Now let (L',M') be the finite Honda system for 
an element in the kernel of t. Since M' = M © M as a D/c £g) F-module, we can 
write M' A , = Ma> © Ma'- We must therefore have, by length considerations, 

L' = {A' ® A A® F)((e 2 , 0), 0) + {A' ® A A® W)(x, (e 2 , 0)) 

for some x G M^/ . From our description of a basis of Ma> , it follows that we 
can take 

x = a(l ® ei,0) + y 

with a € fc (g) F and y an element in the A © F-span of (0, A _m ® e 2 ), to = 
1, . . . e — 1. By applying a Dk <8> F-linear automorphism of M M of the type 

/l *\ 

10 

10' 
\0 1/ 

we can assume that a = 0. Hence the kernel has dimension, as an F-vector space, 
at most (e — l)[fc : We]; and this proves the theorem. □ 

Corollary 2.5 The dimension of H^(Gk' , ad°p) as an F '-vector space is at most 

• [K 1 : Qt] + 1 if [k : F e ] is even, and 

• [K' : Qe] if [k : ¥ t ] is odd. 
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3 The deformation problem 



We now set up the deformation problem we want to study. We begin by fixing 
a totally real extension F of even degree (over Q) , an odd prime £, a finite field 
k of characteristic £, and a continuous homomorphism 

p:G F -^GL 2 (k) 

which is absolutely irreducible and odd. We assume that the ramification degree 
of F at all primes over £ is less than or equal to £ — 1. Further, we suppose that 
p has the following properties: 

• The determinant of p is the mod £ cyclotomic character. 

• p restricted to the absolute Galois group of F(Q) is absolutely irreducible. 
. If £ = 5 and Proj /5| Gal(F/F(c<)) then [Ffo) : F] = 4. 

• Let i be a prime of F above £ and let I x the inertia group of F x . Then 

p\i x ~ fi2k 

where SI2 is the second fundamental character. 

We assume that the characteristic polynomial of p(cr) is split over k for any 
a € Gf- We fix a finite extension K of with ring of integers O, maximal 
ideal (A) and residue field k. 

Let Co be the category of complete, local, Noetherian O-algebras with 
residue field k. Given (A, ttia) e Co, we call a continuous homomorphism 

Pa '■ Gf > GL 2 (A) 

a finite flat deformation of p if 

• pa is odd and unramified outside finitely many primes, 

• p A (mod tru) = p, 

• pa is finite flat at primes v\£ (i.e., the restriction of pa to Gf v , for v\£, 
has the property that for all n > 1, the F^-group scheme associated to the 
Gf v -module pa mod is the generic fibre of a finite flat group scheme 
over Of,v)i an d 

• pa has determinant the f-adic cyclotomic character. 

Two such deformations are said to be strictly equivalent if one can be conjugated 
to the other by a matrix which reduces to the identity modulo the maximal ideal 
vxa- 

Now let S be a finite set of (finite) primes of F not containing any places 
over £ (and it could be empty). We say a finite flat deformation is of type E 
if the representation is unramified outside primes in S and outside the set of 
primes where p is ramified. There is then a universal finite flat deformation of 
p of type S which we shall denote by (i?s, Ps)- 

Given a finite flat deformation p : Gf — > GL 2 (0/A") of type S, one defines 
the Galois cohomology group H^(Gf, ad°p) to be the deformations of p to 
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(C/A")[e]/e 2 which are of type E. Recall that ad°p can be identified with the 
group of 2 x 2 trace zero matrices over 0/X n with G F action via conjugation 
(by p). The cohomology group H^(G f , ad° p) is then precisely H^(G f, ad° p) 
where the local conditions £s = {L x } are given by: 

• L x = H 1 (Gf x /I x , ad°p /x ) if x \ £, x E and p is unramified at x, 

• L x = iJ 1 (Gf x , ad /?) if x \ £, and either x G E or p is ramified at a;, 

• L x = HjiGp^a^p) r£x\l 

The universal deformation ring i?s can be topologically generated as an 
O-algebra by dim^ ii^G^, ad°p) elements. If n : i?s -» is an O-algebra 
homomorphism with corresponding representation p, we have a canonical iso- 
morphism 

Horn (ker7r/(ker7r) 2 , K/O) ^ H^(Gf, ad°p ® K/O). 

The pairing ad°p x ad°p — > k obtained by taking the trace is perfect. Using 
this pairing, one defines H^(G F , ad p(!)) to bc 

given by local conditions {L x } 
where is the orthogonal complement to L x with respect to the perfect pairing 

H l (G Fx ,B,& p) xH l {GF*M p{t)) — > H 2 (G Fx ,k(l)) ~ k. 
From now onwards, we assume the following: 

Assumption 3.1 For each prime x of F dividing i, the Honda system associ- 
ated to p| Fx has the particular form specified in Assumption 12.11 

Now we make some calculations of these cohomology groups, using similar 
arguments to those of Wiles. 

Theorem 3.2 As an O-algebra, 

dirndl (G F ,ad°p(l)) + dim fe i/°(G^,ad°p(l)) 

elements are sufficient to generate the universal deformation ring i?s topologi- 
cally. 

Proof. This is almost exactly the same as the proof of Corollary 2.43 in [6|. 
Using Theorem 2.19 of |6j (a full proof is given in [18], p. 440), one finds that 
dhn^H^G f , ad°p) is the sum of terms: 

• dim fej ffi(G F ,ad°p(l)); 

• J2 x \ £ dim k Hj(G Fx ) - E^dim fe #°(G F J - E.|oo dim*if° (G F J, where 
H*{Gfx) means the cohomology group -ff*(G Fx , ad°p). This term is less 
than or equal to by Corollarv l2.5l 

• dimfeiJ 1 ^, ad°p)-dim fcj ff (G Fx , ad°p), which equals dim fe H°(G Fx , ad°p(l)), 
for each x G E. 

□ 
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Theorem 2.49 of [5] still holds in our present setting; the proof, with trivial 
modifications, remains valid. The result being of significant importance, we give 
a brief sketch of the proof. 

Theorem 3.3 Let r = dim k H^(G F ,ad°p(l)). For every positive integer n, we 
can find a finite set primes S n such that the following hold: 

• Every prime in E„ has norm congruent to 1 modulo £ n ; 

• The sets S ra all have size equal to r; 

• If x € S„, then p is unramified at x and the Frobenius (at x) has distinct 
eigenvalues; 

• The universal deformation ring i?s„ can be topologically generated as an 
O-algebra by r elements. 

Proof. As in the proof of Theorem 2.49 of [BJ, one reduces the result to showing 
that for ip € H^(Gf, ad°p(l)) — {0}, we can find a a S Gf such that 

• a acts trivially on F(Qti), 

• ad°p(er) has an eigenvalue not equal to 1, and 

• ip(a) i (c-- l)ad°p(l). 

(We remark that Theorem l3.2l is crucial in getting the right number of generators 
from this reduction.) 

Let F n be the minimal extension of F(Qn ) on which ad°p acts trivially. The 
degree of the extension Fi/Fq is at most I — 1; the degree [F n : Fi] is of £-power 
order. It follows that 

i? 1 (Gal(F Il /F ),ad°p(l)) GF £* Hom(Gal(F„/F 1 ), ad°p(l) G ^) 

is trivial (since ~p restricted to the absolute Galois group of F(Q) is absolutely 
irreducible) . 

Now consider H 1 (Gal(F /F),ad°p(l) GF o). If this is non-trivial, the order 
of G&\(F /F) must be divisible by t and Ga\(F /F) must have Ga\(F(Q)/F) 
as a quotient. Note that Gal(Fo/F) is isomorphic to the projective image of 
p, and so from the list in Theorem 2.47 of [1] we see that the case I — 5 and 
Proj plGai(F/F(c«)) cann °t occur. In the other cases the projective image of p 
is a semi-direct extension of PSL2(¥ir) by a group of order prime to £, and so 
i? 1 (Gal(Fo/F), ad°p(l)) again vanishes on applying Lemma 2.48 of [B]. 

A straightforward application of the inflation-restriction sequence then im- 
plies that the group H 1 (Gal(F n / F) , ad°p(l)) is trivial, and it follows that 
ip(GF n ) is non-trivial. 

Now p restricted to Gp((; in ) is still absolutely irreducible. Thus the order 
of Gal(F n /F(Qn)) is not a power of I. The group Gal(F„/F(^n)) also acts 
(non-trivially) on {0} ^ ip(GF n ) C ad°p. Therefore we can find a non-trivial 
element g € Gai(F n / F(Q™)) of order prime to £ and fixing a non-zero element 
of iP(Gf„)- Let g e Gpidn) be a lift of g. As ^P(Gf,J <£- (g — l)ad°p(l), we can 
find an h £ Gf„ such that 

i/>(hg) = Hh) + i>(g) i (g - l)ad p(l). 
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Finally, take a — hg. Then a acts trivially on F(Qn), and (a — l)ad°p(l) = 
g— l)ad°p(l) 7$ ip(u). Since the order of a is prime to I (and is not 1), it follows 
that ad°p(cr) has an eigenvalue not equal to 1. □ 



4 Hecke algebras and £-adic modular forms 

We fix a totally real field F of even degree and an odd rational prime £. We write 
D for the division algebra with centre F and ramified exactly at the set of infinite 
places of F. Write Z for the algebraic group defined by Z(R) = (D ®f R) x if 
R is an F-algebra. We also fix the following: 

• A maximal order On, and isomorphisms Od,x — M2(Of. x ) for all finite 
places x of F. These isomorphisms give us an identification of GL 2 (A^) 
with (£>®q A°°) x ; 

• A uniformiscr w x of Of.x for each finite place x. 

We write A for a topological Z£-algebra which is one of the following: a finite 
extension of Q^, the ring of integers in such an extension, or a quotient of such 
a ring of integers. 

Definition 4.1 For a compact open subgroup U C (D (8>q A°°) x and a topo- 
logical ring A as above, we define Sa(U) to be the space of continuous functions 

/:D X \( J D® Q A°°) X /J7.Z(A|?) — > A. 

We define Sa to be the direct limit of Sa{U) as U varies over open compact 
subsets of (D®q A°°) x . 

For a compact open U, the finite double coset decomposition 

0D® Q A°°) x =Y[D x t t U.Z(Af) 

shows that 

Sa(U) - ®i 

i 

f — (/(*;)); 

is an isomorphism. In particular, for any A-algebra B, we have 

S A (U) ® A B^S B (U). 

We denote by [t t ] the function in S A (U) which is 1 on D x UU.Z(Af) and 
elsewhere. 

Definition 4.2 For an ideal n of Of and quotients H x of {OF, x /n x ) x , we set 
H = f\ x H x . We define Ur (n) to be the compact open subgroup Y\ x Uh{^)x C 
(D ®q A°°) x where 

U H (n) x = | ^ ^ G GL 2 (Of,x) = O x ^ x c e tlx, a^ 1 = 1 in H x | . 
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Now let n and H x be as in the above definition. We recall the definitions of 
the various Hecke operators on Sa(Uh (ti)): 



If x does not divide in, we denote the Hecke operators 



U H (n) 



VJ X 





U H (n) 



and 



U H (n) 









ro 3 



U H (n) 



by T x and S x respectively. 
If x divides n, we set 

(h) = 



U H (n) 



h 
1 



U H (n) 



for h G H x and h a choice of lift of h to O f x 
If x divides n, the Hecke operators 



U H (n) 







U H (n) 



and 



U H (n) 



1 

w x 



U H (n) 



are denoted by U CTx and V rox respectively. We also denote by S x the 
Hecke operator 

w x 

TU T 



C///(n) 



U H (n) 



Definition 4.3 Let n, H x and A be as in the preceding paragraphs. We de- 
fine the Hecke algebra Ta(Uh{^)) to be the A-subalgebra of End^SU^ff (n))) 
generated by T x (for x not dividing in) and U rox (for x|n but not dividing t). 

A maximal ideal m of Ta{Uh{k)) is said to be Eisenstein if it contains T x — 2 
and S x — 1 for all but finitely many primes with Nx (mod i) = 1. 

The Hecke algebra T^JTff (n)) is always commutative. Also, Tz 4 (/7jj(n)) is 
semi-local and Radically complete, and we have the identification 

T Ze (U H (n))^l[T Ze (U H (n)) m 

where the product is over all maximal ideals m. 

If either i is invertiblc in A, or if Q(( + <£. F where £ is a primitive ith 
root of unity, we have a perfect pairing on 5^(i7fl-(n)) defined by 



(/l,/2) C / H („)=^/l(ii)/2(iO (# 

'I 



/7 ff (n).Z(A~)nt- 1 i? x t J 



where 



(D®qA°°) x =[]^ x i 4 ;7H(n).Z(A^). 



We call this the standard pairing. The Hecke operators are not necessarily self- 
adjoint with respect to this pairing; the general behaviour of operators is given 

by 



{[U H '{n')gU H {n)]h,h) UHi(nl) = (f u [CMn^CMn')] / 2 ) 



U H (n) • 
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Now fix a finite set of primes E, none lying above £, and let ri£ = Il^ex 



2 



Let if be a finite extension of which contains all embeddings F <— > Q^, and 
let be its ring of integers. We fix a decomposition 

(D® Q A°°) X = ]]_D x g z U 1 (n^).Z{Af)n]]_D x h l U 1 (n^.Z{Af) 

where the g^s and h^s are such that 



px 



# 



U 1 (n^).Z(Af)nh~ 1 D x h l 



We denote by So(Ui(xis))* the O-submodule of So(Ui(n^)) generated by the 
[gi] and £[hi]. 

Lemma 4.4 Keep the notation of the preceding paragraph, and suppose that 
the ramification index at all primes over £ of F is at most £ — 1. Then £ exactly 
divides the order of (E7i(n E )..Z(AJ?) n h- 1 D x h l )/F x . 

Proof. One easily reduces the statement to showing that finite subgroups 
of D x having f-power order must have order exactly 1 or £ (use the two exact 
sequences in the proof of Lemma 1.1 of [30] ). Further, there can be a non-trivial 
finite subgroup of f-power order if and only if £ + £ _1 is in F. Since any group 
of order i 2 is abelian, the only possible non-trivial finite subgroup has to have 
order exactly £. □ 

Lemma 4.5 With the notation as above, let f S So(Ui(xis)). Then T x (f) € 
<S'o(^i( n s))* f or an U prime x (fc E with N.t = — 1 (mod £). 

Proof. Let be the subgroup of f/i(tls) consisting of elements whose xth 

component is congruent to ^* ^\ (mod vj x ). Let Q E h~ 1 D x hnUi(n-s).Z(A^) 

have order exactly £ in the quotient (h~ 1 D x hn Ui(n^).Z(Af)) / F x . We need 
to compute T x (f)(h) and check that it is a multiple off. Starting with a double 
coset decomposition given by YliZo C * and using the fact that C ^ U^°\ 
we get a disjoint decomposition 

I (Ni+l)/f 

»=i i=i 

This shows that, by index considerations, 

/ n\ £ (Nx+l)/£ 

C/i(n S )(^ J)^(n B ) = n II CSfr JWs). 
Since = dih for some di £ D x , we have 

£ (Nx+l)/<? 



KJj 

•> \ \ o 1 

i=l 3=1 



CC7 X 

1 



e (Nx+i)/e 

E E /(^ 

i=l 3=1 
(Ni+1)/I 

* E f( hu i \ o , 



n7 x 
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The lemma follows. □ 
Now we discuss various properties of the modular forms and Hecke operators. 



Theorem 4.6 Keeping the assumptions of the two preceding lemmas, we have 
the following: 

1. The O-module So(Ui(xis))* is invariant under the action of Hecke oper- 
ators. 

2. The pairing on Sk{Ui(xi-e)) induces a perfect pairing 

So(tfi(n E )) x S (£/i(n E ))* — > O. 

3. Letm be a non-Eisenstein maximal ideal of the Hecke algebra To({/i(tis))- 
Then So{Ui(xis)) m — So{U\{n^))* m - As a consequence, the pairing on 
5jf(f/i(ns)) induces a perfect pairing on 5o(t r i(tTs)) m . 

Proof. The first part is easily checked using the given pairing on Sk (Ui(ns)). 
The second part follows from Lemma 14.41 The third part is a direct consequence 
of Lemma 14.51 □ 



5 Deformations in the minimal case 

In this section, we show that the universal deformation ring in the minimal 
case is isomorphic to a Hecke algebra, and we show that these are complete 
intersection rings of relative dimension zero over Z p . 
Recall that we are given a continuous representation 

p : G F —> GL 2 (fc) 

satisfying the various properties listed in the beginning of section [31 and also 
satisfying Assumption 13.11 In this and the next section, we shall assume the 
following additional modularity condition. 

Assumption 5.1 Let Uq denote Usiy(n$). Then we assume that there is a 
continuous homomorphism (f> : Tq(Uq) — > k with non-Eisenstein kernel which 
gives our representation p. We write mg for the kernel. 

Our aim is to show that the natural map Rq -» To({7o)ra a is an isomorphism of 
complete intersection rings. 

Fix a finite set of primes E of F not dividing I such that for every x £ S, 
we have 

• = 1 (mod £), 

• p is unramified at x and has distinct eigenvalues a x ^ (3 X . 

We denote the maximal ^-power quotient of (Of/x) x , for x £ E, by and set 
As = Y[ As. We define the following objects (all products are over x 6 E): 

1. an ideal = Y[ % 2 ■ 



15 



2. compact open subgroups J7 ,s = t r {i}(ns) and — U^ s (yis). 

3. an ideal ms of either T([/ ,s) or T(Ci,s) generated by I and 

• T x — tr p(Frob x ) for x \ £ns, and 

• U roj . — a x for x £ S. 

Note that Lemma 2.1 and Lemma 2.2 of |30] remain true in the present 
situation (and we will write them down again in a moment). We also have the 
fact that So(Ux,s) is an C[Ax;]-module via h — > (ft). But slight care is required 
for the critical Lemma 2.3 and Corollary 2.4 of [3D]: it is no longer obvious 
that So{Ui,t.) itie is free over C?[Ajj]. Nonetheless, we can still get the 'patching 
modules' technique of [7 to work. 

We first present a trivial reformulation of Theorem 2.1 of [7]. 

Theorem 5.2 Fix a positive integer r, a finite field k; set A — k[[Si, . . . , S r ]] 
and B = k[[X±, . . . , X r ]]. We denote the maximal ideal of A by n. We are 
given: a k-algebra R, a non-zero R-module H which is finite dimensional over k. 
For each positive integer n, we suppose that we have k-algebra homomorphisms 
4> n : A — > B and ip n : B — > R, a B -module H n and a B -linear homomorphism 
7r„ : H n — > H such that: 

• ip n is surjective and ipn<t>n = 0, 

• 7r„ induces an isomorphism between H n /nH n and H, and 

• there is an unbounded sequence of positive integers (a n )„>i such that 
H n /n an H n is free over A/n an . 

Then R is a complete intersection, and H is free over R. 

We now begin analyzing and comparing the C[Ax;]-module structures of 
So(Uo,s) and £o(^i,e)- Denote the augmentation ideal of 0[Ae] by Ia s - Ob- 
viously, functions in So(Uq^) are precisely the elements of 5o(Ui e) which are 
invariant under the action of As; there is a 'norm' map 

E ( h ) ^o(C/i,e)a s — » S o (U ,v), 

where the subscript denotes coinvariants. 
Proposition 5.3 The norm map 

E (h) : S G (t/i,E) — » So(U ,s) 

has kernel Ia s So{Ui,-z) and surjects onto So(Uq,i:)* ■ 
The T '(V \ > s)- module 

E H ^(^.e) 

\^eA s [£] / 

is /ree over C[Ae/As[^]]; and the norm map factorizes, in an obvious way, as 
the composite of 

E w and E w- 

heA E [f] /iGAs/AbM 
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Proof. We have a decomposition 

(D® Q A°°) X =]jD x UUox.Z(Af). 
For h £ As, we have a lift h £ (AJ?) X which gives the coset decomposition 



1, si- 



There is an obvious transitive action of As on this coset decomposition. 
For each L, we define 



Stab 4 = <h £ As 



D x UU hi: .Z{Af) = D X U (jj ^ E7 liE .Z(A^) J . 



Obviously, the definition is independent of the representatives ti and depends 
only the double coset decomposition. We get the double coset decomposition 

(7J® Q A°°) X =;Q ]l D x tA h Q f) U^.Z(Af). 

i /iGAs/Stab; ^ ' 

In particular, we see that the set 

|J{(/i}N|/ie As/Stab^} 

i 

is a basis for the free O-module So(U\,t)- 
It is now clear that the image of the map 

( h ) ■ So{U!,v) — > So(U , E ) 

is free over O with basis { | Stab^ | [U]} i . The fact that the kernel is the image of 
the augmentation ideal is obvious once we show that it is enough to consider 
elements in the kernel having the form 

x = ah(h)[ti] with ah £ O and ah = 0. 

heA s /Stabi TieA^/Stab; 

It suffices to consider such x because we can write x — ^Xi, where Xi lies in 
the kernel and has the form |Stabj|(^a/j)[f,]. 

We now show that the image of the norm map is 5o(/7o,s)* by proving 
that the order of Stabi is equal to the power of I that divides the order of 
(t- 1 D x UnU ^.Z(Af)) /F x . 

We claim that the order of (tJ 1 D x t i n Ui t ^.Z(Af)) /F x is not divisible by 
I. Indeed, let a £ tr 1 D x t l n U lt v-Z(Af) be such that a e £ F x . Fix a place 
x £ S. We can write the x-th component of a £ U\^.Z{A^) as u x z x where 
z x £ K x and « x £ GL 2 (O x ) satisfies 



h * 
1 



(mod uj x ) 
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with h having order prime to £. Raising u x to the £— th power, one deduces 
that u x reduces to the identity mod oj x , and hence that u x is trivial. This then 
implies that a £ F x . 

Let m be the prime to £ part of the order of (tJ 1 D x t l n U ^.Z(Af)) /F x . 
We define a map 9 : Stab, — > (tr 1 D x t i n U ,n.Z(Af)) / F x as follows: If 
h £ Stabj, we must have dti = hu\a — x (say) for some d £ D x , u\ £ 
U lt T, and a £ {Af) x . Thus x £ t~ 1 D x t l n U Q x-Z(Af), and we set 9(h) = 
x m (mod F x ). By the claim established in the previous paragraph, it follows 
that 9 is a well-defined injective homomorphism from Stabi to the ^-primary 
part of {t~ 1 D x U n U .T,.Z(Af)) /F x . Since by Lemma S3 the order of the 
^-primary part of (tY 1 D x t l nU Q ^.Z(Af)) /F x is exactly £ or 1, it is then 
simple to verify that 9 is an isomorphism between Stab^ and the ^-primary part 
of (t^ 1 D x t i n Uo > j;.Z(A ! p)) /F x . It follows that the image of the norm map is 
exactly S o (U ^)*- 

The last part of the proposition follows since Stab^ c As [£} . □ 

The following is Lemma 2.2 of [30j . The proof given in [30j works verbatim 
in our case (thanks to Theorem 14. 6[) . 

Lemma 5.4 There is an isomorphism So(Uo$) m!l — * So (^o,s)ms inducing an 
isomorphism T(Z7o,s)m E ~> T (^oj)m - □ 

Using the fact that the rings in consideration are semi-local, reduced and 
complete (they are finite flat -algebras) , and Theorem l4.6[ we get the follow- 
ing: 

Corollary 5.5 1. There is an isomorphism Sb^i.xOms.As — > So{Ui$)m<t . 
This isomorphism is compatible with the map on Heche algebras ^(Ui^jm^ 
T([/o,0)m a which sends: 

• T x to T x for x not dividing £ns, 

• (h) to 1 for h £ As, and 

• U rox to A x for x £ £ where A x is the unique root of X 2 — T X X + Ni 
in T(L T o ! 0)m 9 congruent to a x (mod mg). 

2. The surjection Se>(C/i,£) ms -» So(Ui$) mt given by composing the norm 
map with the isomorphism of the preceding lemma factorizes as the com- 
posite of 

5'o(t r i,s)m s ,A E -» H s and if s — > 5'o(t r i,0)m 9 

where: 

• H% is a T(Ui t s) mi: -algebra and the maps are compatible with the 
algebra structures, and 

• Hs is a free 0[A^/As[£}] module. 

□ 

We apply the above corollary to the sets £„ produced by Theorem 13.31 
Applying the 'patching modules' result of Diamond [7] and Fujiwara [TT] (The- 
orem [52] above) , we get the following result. 
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Theorem 5.6 The natural map 

i? — > T(U Q ) mt 

is an isomorphism of complete intersection rings and the module So{Uo) mi/l is 
free over T(C/ )m 9 - □ 

6 Non-minimal level 

The proof of the result in the non-minimal case given in [30j remains valid in 
our case. We shall only give a sketch. Throughout this section, we keep the 
various assumptions (and notation) of the last section. 

Fix a homomorphism 7rg : Rq -» O. We now let £ be a finite set of primes of 
F not containing any primes above I. We denote by 7rs the surjection R% -» O 
obtained by taking the composite of 

iis -» R$ -» O 

where the first map is the one given by the universal property of i?s and the 
second map is 7T0. We shall denote the kernel of 7rs by <$s- 

Let ns = Ilxes 2 ' 2 ' anc ^ ^ s = ^{i}( n s)- Also, let mj be the maximal 
ideal of To (Us) corresponding to our residual representation ~p. We denote by 
Ts the localization To(Us) ms , and write 5s for the Ts-module 5e>(£/s) ms . 

We then have the following. 

Theorem 6.1 The natural map i?s -» Ts is an isomorphism of complete in- 
tersection rings and 5s is free over Ts . 

To prove the theorem, one needs to check (by Theorem 2.4 of [7]) that the 
order of ^Ps /Vs divides the order of 

„ dcf 5s 

"s = 



5 E [<P]®5 s [Ann TE q3]' 
A standard computation shows that the order of ^Ps/Spf, divides 

# (5p /?pg) [] # (W - N ^( T * ~ (1 + Nz) 2 )0) , 

and we shall prove that this expression is the order of f^s- 

Note that Sx^Ps] is a free O-module of rank 1. Fix a perfect symmetric 
O-valued O-bilinear pairing { , }s on 5s[*Ps], and let js : 5s PPs] c — ► 5s be 
the natural inclusion. Also, define a pairing ( , )s on 5s by 

(/l,/2>E = (fl,W^f 2 ) 

where ( , ) is the standard pairing, and ws G GL/2(A|?) = (D ®q A°°) x is the 
element defined by 

identity, if x ^ S, 
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This new pairing is perfect, and the Hecke operators are self-adjoint with respect 
to ( , )s- 

Now let i be a prime not dividing n^L There is a well-defined map 

ix '■ 5s — ► 5su{x} 
which is obtained from the map sending / £ 5e>(£/s) to 

(N*)/-(J ^)/ eS (U, u{x} ). 

Under this map, the image of 5s[^Ps] is contained in 5su{z} [^Psu{z}]- We denote 
by i x the resulting map from 5 s R5s] to 5s U {x}[^Psu{ ! < : }]' 
We then have the following. 

• Let i* be the adjoint of i x with respect to the pairings ( , )s and ( , }su{x}- 
The composite i* o i x is equal to 

Na(l - Nx)(T% - (1 + Nx) 2 ). 

• *z(5sPPs]) = 5su{a;}[^Psu{a;}]- This follows from Ihara's lemma (see 
Lemma 3.1 of [30)). 

• Let jf; be the adjoint of js with respect to the pairings { , }s and ( , )s- 
It induces an isomorphism 

Js : i2 s 



• Let ia, be the adjoint of i x with respect to the pairings { , }s and 
{ , }su{i}- It is an isomorphism, and we have i x o j^ u r x \ = is ° C- 

It follows that 

#O s = #O [] # (0/(1 - Nx)(T 2 - (1 + Nz) 2 )©) . 

The result in the minimal case implies that = ^CPg/^p 2 ,), and hence that 

#|f|#0 E . 



7 Modularity of Galois representations and el- 
liptic curves 

We now collect the results of the preceding two sections. 

Let F be a totally real, finite extension of Q. Let O be the ring of integers 
in a finite extension of Qi where t is an odd prime, and let k be its residue field. 
We suppose that we are given continuous representations 

Pi : Gf — > GL 2 (0), i = l,2 

satisfying the following properties: 
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• pi (i = 1,2) is an odd representation unramificd outside finitely many 
primes; 

• det pi = det P2 = Q where ei is the ^-adic cyclotomic character. 

• The residual representations 'p i : Gf — ► GL/2(fc) are equivalent and are 
absolutely irreducible. We denote the residual representation by p. 

Theorem 7.1 With notations as in the preceding paragraph, we make the fol- 
lowing assumptions. 

• The restriction of p to the absolute Galois group of F(Q) is absolutely 
irreducible; furthermore, if £ — 5 and Proj plGai(F/F(c f )) then [F(Q) : 
F] = 4. 

• ( Conditions at £.) Let v be any prime of F dividing £, and let I v be the 
inertia group of F v . We assume: 

1. ~p\i v ~ ^2|/„, where ^2 is the second fundamental character of the 
inertia group ofQe- 

2. Let m be the maximal ideal of O, and let n be the reduction of pi 
modulo m™. Then p,- n |i?„ is finite flat. 

• The ramification index of F at any prime above £ is less than or equal to 

e-i. 

Under these assumptions, the modularity of p\ implies the modularity of pi ■ 
Proof. We can find a totally real, finite soluble extension F' /F such that: 

• The extension F' / F is unramified at primes dividing £. 

• p~\g f , satisfies Assumption 15 . 1 1 (For this, we need to use the modularity 
of pi along with the base change results in [2T].l 

It follows that P2|g f / is modular. Langlands' cyclic base change then shows 
that p2 is modular. □ 

In section we will give some applications to the modularity of elliptic 
curves. However, let us remark here that Theorem 17. II will not apply in general 
to all supersingular curves, as the first condition at I will not be satisfied in 
general. Indeed, let F = Q(y/S), and let E denote the elliptic curve 

y 2 = x 3 + V3x 2 +x + l. 

The curve has discriminant 32(3\/3— 14), and hence has good reduction at the 
prime -\/3 above 3. On the other hand, it is easy to show that multiplication by 
3 on the group law of an elliptic curve 

y 2 = x 3 + a-ix 2 + a^x + ciq 

is given by 

[3]t = 3t- 8a 2 t 3 H , 

so that the curve above has supersingular reduction at yo, as 1)3(02) = 1^3 (\/3) > 
0, showing that the formal group at 3 has height 2. As in Serre [35] 1 Proposition 
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10, the action of tame inertia on the 3-torsion points is given by 2 copies of the 
fundamental character of level 1, rather than by the fundamental character of 
level 2. 

Serre's argument also shows that in order that the mod 3 representation of 
the curve E be given (on tame inertia) by the fundamental character of level 2, 
it is necessary and sufficient that the Newton polygon of the multiplication-by-3 
map on the formal group should consist of a single line from (1, e) to (9, 0). This 
is automatic when e = 1, but if e > 1, then other situations may arise, as above. 

It follows that our main result can apply to all supersingular curves defined 
over fields F unramified at 3, as well as to many examples of curves defined over 
more general fields. 

8 Applications I 

Theorem 8.1 Let ~p : Gal(Q/Q) — > GT^Fy) be an absolutely irreducible, 
continuous, odd representation. If the projective image of~p is insoluble, we also 
assume that: 

• The projective image of inertia at 3 has odd order. 

• The determinant of ~p restricted to the inertia group at 7 has even order. 
Then ~p is modular. 

Sketch of proof. Of course, we need only consider the case when the image of 
75 is insoluble. Moreover by [17j . we can assume that the restriction of Jj to 
a decomposition group at 7 is irreducible. Twisting by a quadratic character, 
we can also assume that 75\i 7 is equivalent to UJ2 ffi u\ or uj}, 3 oj^' 13 where 
LU2 '■ I7 — ► F^g is the second fundamental character. Applying the axiomatic 
formulation of Ramakrishna's result in together with Theorems 3.2.1, 4.2.1 
of [4], one deduces the existence of a continuous, odd representation 

p : Gal(Q/Q) — ► GL 2 (Z 7 ) 

lifting p, unramified outside finitely many primes, determinant the cyclotomic 
character times a finite order character, and such that the Artinian quotients p 
(mod 7 n ) are finite flat when restricted to the absolute Galois group of Qt(7 1 / 4 ). 
Assuming the existence of a totally real soluble extension F/Q such that p~\a F 
is modular and the ramification index of F/Q at 7 is at most 6, one deduces the 
modularity of p by Theorem 17.11 and Langlands' cyclic base change. 

We now explain how to find such a field F. Firstly, we can find a finite 
soluble, totally real extension F\/Q and a quadratic twist of p|<3 Pi , which we 
denote by p, such that the following conditions are satisfied. 

• The determinant of p is the mod 7 cyclotomic character. 

• Conditions at 3: Let v be any prime of F\ above 3, and let D v be a 
decomposition group at v. 

— p is trivial on D v . 

— The ramification index of Fi :V /Q 3 is odd. 
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• Conditions at 7: Let v be any prime of F± above 7, and let D v , I v be 
the decomposition and inertia groups at v. Then, the ramification index 
of Fi_ v /Q 7 is exactly 4. Furthermore, we have p\i F v = [uJ% ® ^V)\if 1 „ ■ 

We denote by X(p) the (completed) moduli space of elliptic curves with mod 7 
representation symplectically isomorphic to p (see |17) for details). The canon- 
ical divisor embeds X(p) as a quartic curve in Py Fl - 

For each prime v of F\ dividing 3co, we can find a finite unramified extension 
Fv/F\,v & n d a line L v defined over F\ jV such that L v cuts X(p)/p v at four 
distinct points all of which are defined over F v . Moreover, the elliptic curves 
corresponding to these four points all have good ordinary reduction when v\3. 
(See the fourth paragraph in section 5 of |17j.) For primes above 7, we have the 
following lemma: 

Lemma 8.2 Let v be a prime of F\ above 7. We can find a finite Galois 
extension F v / F\_ v and an F v -rational line L v such that the following holds. 

• L v cuts X{fi) ip v at four distinct points all of which are defined over F v . 

• The ramification index of F v /Qi is at most 4. The four points of intersec- 
tion are all elliptic curves with good supersingular reduction. 

Assuming the above lemma, intersecting X{j>) with a line over F\ which is 
i>-adically close to L v for each u|3.7.oo gives the following: There is a finite, 
soluble, totally real F D F\ D Q, and an elliptic curve E/p satisfying the 
following conditions. 

• Pe,7 ~ p\g f and p E 3 : G F -» Gi 2 (F 3 ) is surjective. 

• Conditions at primes v dividing 3: E has good ordinary reduction at every 
prime above 3 and the ramification index of F at 3 is odd. 

• Conditions above 7: Fj ' F\ is unramified at every prime above 7 and E has 
good supersingular reduction at every prime above 7. 

The elliptic curve E is modular by a result of Skinner and Wiles (:26.), and 
therefore p is also modular. □ 

Proof of Lemma 8.2. The modular curve X(u>2 © ^2) /Q" i s isomorphic to X(p) 
over Qy r (v / 7). The elliptic curve y 2 = x 3 + x has j-invariant 1728 and so has 
supersingular reduction. Taking a cyclic degree 3 isogeny of E if necessary, 
we can assume that X(u>2 ® ^Di^Y) contains an elliptic curve E having good 
supersingular reduction and with j-invariant 1728. Let us denote this point by 
P. From the geometry of the Klein quartic (see the proposition in section 2 of 
[1]), we see that there is a unique involution (in the automorphism group) fixing 
P. The normalizer of this involution is a Sylow 2-subgroup, and the orbit of P 
when acted on by the normalizer has size exactly 4. Furthermore, they (the 
points in the orbit) lie on a unique line. 

We can thus find a unique line L passing through P such that: 

• L is defined over Q? T , 

• L passes through four distinct points of X(u>2 (Buj^) whose j-invariants are 
1728. 
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We claim that two of these points are already defined over QE! r . We have the point 
P with corresponding elliptic curve E. Note that E has complex multiplication 
by Z[i] (and the endomorphism ring is already defined over Q" r ). We now 
check that the isogeny gives us another point of intersection (which is 

obviously defined over Q" r ). This can be checked over C, and follows from the 
following observations. 

• The involution ^ G PST 2 (F 7 ) fixes 

({l/7,i/7},C/Z+iZ) G X(7)(C). 



* f ^2 2y * S ™ normauzcr °f ^ ^ gj an< ^ sends 

({l/7,£/7},C/Z+iZ) to ({2-2i/7,2 + 2i/7},C/Z + iZ). 

Thus each of the four points of intersection are defined over Q? r (V7). The 
Sylow 2-subgroup which acts transitively on these four points is dihedral; in 
terms of generators and relations, it is given by 

(a,/3\ a 4 =P 2 = e,j3aj3 = a 3 ). 

The unique involution which stabilizes P is a 2 , and it is defined over Q^ 1 '. The 
other three points are given by a(P), /3(P) and a(3(P). 

We now check that a, (3 are defined over Q" r (-\/7)- If u G Gq^^), we have 

(v*/3)(P) = a(J3(*- 1 P))=0{P). 
Therefore, we have a * 13 = a 2l( -^f3 where 

i : G Qf(V7) * Z / 2Z 

is a continuous homomorphism which necessarily factors through Qff^tfT). Sim- 
ilarly for a. We can thus conclude that all the four points of intersection have 
good supcrsing ular reduction Q^(^7). 

Finally, it follows that we can find a line defined over an extension of Fi jV 
with absolute ramification index 4 which cuts X(p) at four distinct supersingular 
points, all defined over that extension. Take F v to be the Galois closure of the 
extension thus constructed, and take L v to be the line L i Fv . □ 



9 Applications II 

The aim of this section is to study the modularity of elliptic curves over certain 
totally real fields, using Theorem 17. f I Our main results are given by Proposi- 
tions and For the particular example of the field Q(\/2), we can prove 
more; the analogue of the switch between p = 3 and p = 5 used by Wiles 
(|32j. §5) holds, and we can use existing results, together with the new results 
in this paper, to deduce the modularity of all semistable elliptic curves over 
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In [12j . it is explained that this implies a version of Fermat's Last Theorem 
over Q(-\/2). Further calculations in [T^] show that Q(V2) is the only real 
quadratic field for which one can hope to generalise the methods of Ribet and 
Wiles to prove such a result. It seems remarkable to us that there are any fields 
other than Q for which all the numerology allows us to prove generalisations of 
Fermat's Last Theorem. 

We begin by proving results for more general fields. We start with a prelim- 
inary lemma. 

Lemma 9.1 Let p be equal to 3 or 5, and let F be a totally real number field in 
which p is unramified. Let E be an elliptic curve over F with good supersingular 
reduction at some place v\p. Then 

P E >P I Gal^/F^-l^-W 2 ?) ) 

is absolutely irreducible. 

Proof. The presence of a non-trivial complex conjugation shows that irre- 
ducibility is the same as absolute irreducibility for odd GL2(F p ) -valued repre- 
sentations of totally real fields. The lemma then follows easily when p = 5. 

We now do p = 3. Suppose, for a contradiction, that the conclusion of the 
lemma fails. Let I v be a decomposition group at v. Since the image p~e 3(Iv) 
is cyclic of order 8, it follows that the image p E 3 (G&\(F/F)) is the full Sylow 
2-subgroup of GL 2 (F 3 ). Denoting by K the splitting field of p E 3 , it follows that 
the image p E3 (Gal(K/F(y/— 3))) is an abelian group of order 8. 

The Sylow 2-subgroup of GL 2 (F 3 ) is the group 

(c, t\ C 2 — T 8 = 1, CT = T 3 c), 

and we may suppose that 

c =G r= (-i !)• 

Since the image of Gal(K/ F(\/~ 3)) is in SL2(F 3 ), it must in fact be the sub- 
group generated by r 2 and cr. This subgroup is non-abelian, giving the desired 
contradiction. □ 

The next two propositions prove modularity of many elliptic curves over 
certain totally real fields, using Theorem 17. II 

Proposition 9.2 Let F be a totally real number field in which 3 is unramified, 
and let E be an elliptic curve over F with good supersingular reduction at primes 
above 3. Then E is modular. 

Proof. We proceed in several steps. By the result of Langlands and Tunnell, 
we know that ~p E 3 is modular. However, in order to apply Theorem 1 7. II we need 
to produce a modular lift with level coprime to 3. 

Step I: By Langlands' cyclic base change, we need only prove the result over a 
totally real soluble extension. In particular, making an appropriate base change 
if necessary, we can assume that ~p E 3 \d v is trivial for any prime v\b. 
Step II: We can find an elliptic curve E' over F such that 
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• Pe,3 ~ PE',3' 

• ~p E i 5 has insoluble image, 

• E' has good ordinary reduction at every prime above 5 and 

Pe>,5\d v = *j for any u|5 

with distinct characters on the diagonal, 

• E' has good reduction at primes above 3. 

If we can show that E' is modular, then pe',3 will be a modular lift of ~p E 3 of 
the 'right level'; we can then use Theorem l7.1l to conclude that p E ,3 is modular. 

In order to show that E' is modular, we want to make use of its 5-adic 
representation and apply the results in For this, we need to produce a 

nearly ordinary modular lift of Pe',5- Again, we can work over totally real soluble 
extensions. 

Step III: We can assume that ~p E , 5 is trivial when we restrict to primes above 
3. We can then find a second elliptic curve E" such that 

• PE',5 ~ PE",5> 

• ~p E n 3 : Gf — * GI^Fa) is surjective, 

• E" has split multiplicative reduction at every prime above 3 and 

Pe",s\d v = *^ for any u|3 

with distinct characters on the diagonal, 

• E" has good ordinary reduction at primes above 5. 

By Theorem 17. l\ E" is modular. 

Since pe",5 is a nearly ordinary modular lift, it follows that pe',5 is modular. 

□ 

Proposition 9.3 Let F be a totally real number field in which 3 and 5 are 
unramified. Let E be an elliptic curve over F with semistable reduction at 
primes above 3 and 5. Further, assume that E has good super singular reduction 
at primes above 5 and that ~p E 5lGai(F/F( v / 5)) * s irreducible. Then E is modular. 

Proof. Going up to a soluble totally real field (without changing ramification 
at 3 and 5) if necessary, we can assume that ~p E 5 |d u is trivial for places v\Z 
where E has good reduction. Then using the twisted modular curve X(E[5])/p, 
we can find an elliptic curve E' / F such that 

• PE',5 ~ Pe,5> 

• E' has the same reduction type as E at primes above 5, 

• E' is a Tate curve at primes above 3, and 

• Pe' 3 '■ Gf — ► GL 2 (F 3 ) is surjective. 
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It follows that /o_b' ; 3 is modular, and /o.e',5 is a modular lift of ~p E 5 of the 'right 
level'. Therefore, using either Theorem 5.1 of or Theorem l7.1l of this article, 
it follows that p E ,5 is modular. □ 

Having proven some results over general fields, we now specialise to the case 
F = <Q>(\/2), for which, as we shall see, there is also a version of the switch 
between 3 and 5 used by Wiles ([35], §5). In particular, this allows us to prove 
the modularity of all semistable elliptic curves over Q(y2). 

Proposition 9.4 Let E be a semistable elliptic curve over Q(y2). Let p be 
either 3 or 5. Lfp Ep is irreducible, then 

Pe >P I Gal(j?/F(V(-l) (p " 1)/2 p) ) 

is absolutely irreducible. 

Proof. Suppose the proposition fails to hold. Then p does not divide the 
order of p Ep (Gal(F/F)), and so the semistability condition implies that ~P~e, p is 
unramified at primes not dividing p. Further, by Lemma l9.11 we see that E has 
good ordinary or multiplicative reduction at p. Therefore, we must have 



Pe, p 



where e p is the mod p cyclotomic character. (Note also that 3 and 5 are inert 
in Q(V2).) 

Let K be the splitting field of ~p E pl and let £ p be a primitive pth root of 
unity. Then K is an everywhere unramified abelian extension of Q(\/2, ( P ). The 
class number of Q(v% Cp) is then checked to be equal to 1 for both p — 3 and 
p = 5 (we used PARI to verify this), giving the required contradiction. □ 

Proposition 9.5 The modular curve Xo(15) has exactly eight Q(\/2) -rational 
points. Four of these are cusps. The remaining four are elliptic curves with 
additive reduction at 5. 

Proof. Xo(15) is an elliptic curve, and, using Cremona's tables [5], we can find 
an explicit equation for it. The rank of Ao(15) regarded as an elliptic curve 
over Q(V2) is the sum of its rank over Q and the rank (over Q) of its quadratic 
twist. An equation of Ao(15) over Q is y 2 + xy + y = x 3 + x 2 — lOx — 10, and its 
quadratic twist over (y/2) is y 2 = x 3 + x 2 - 641a; - 3105, which is curve 960G3 in 
Cremona's tables. Both curves have rank over Q, and it follows that Xo(15) 
has rank over Q(\/2). Thus all of its points over Q(a/2) are torsion points, 
and we can count them by considering the number of points in various residue 
fields of Q(a/2) (as in VTI.3). Note that 7 splits in Q(y/2), so Q(a/2) has 
a residue field isomorphic to F7. Now Xq(15) has good reduction at the primes 
above 7, and |X (15)(F 7 )| = 8. By [21], VII.3.1(b), we see that the size of the 
torsion group over Q(^/2) divides 8. However, we know that Xq(15) has 8 points 
over Q, all of which are torsion, and so these can be the only points on Xq(15) 
defined over QO/2). Of these, 4 are cusps, and the remaining 4 correspond to 
elliptic curves over Q which have additive reduction at 5 (curves 50A1, 50A2, 
50A3 and 50A4 in Cremona's tables). Since 5 is unramified in Q(\/2)/Q, these 
curves continue to have additive reduction at 5 over Q(^/2), and so are also 
not semistable. It follows that none of the Q(-\/2)-rational points on Ao(15) 
correspond to semistable elliptic curves. □ 
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Theorem 9.6 Any semistable elliptic curve over Q(\/2) is modular. 

Proof. Let E be a semistable elliptic curve over Q(v2). By Proposition 19. 5[ 
one of ~p E 3 or ~p E 5 will be absolutely irreducible. The case where ~p E 3 is abso- 
lutely irreducible and E has good ordinary reduction or multiplicative reduction 
at 3 follows from Theorem 5.1 of (using Proposition 19.41 to check the hy- 
pothesis that ~p E 3 1 / pK/^%y\ is absolutely irreducible). If ~p E 3 is absolutely 
irreducible and E has supersingular reduction, then the modularity of E follows 
from Proposition 19.21 Otherwise ~p E 5 is irreducible, and modularity follows by 
switching to an elliptic curve E' as in the proof of Proposition ^. 31 By the pre- 
vious argument, E' is modular, so that ~p E , 5 = ~p E 5 is modular. If E has good 
ordinary reduction or multiplicative reduction at 5, modularity follows from 
Theorem 5.1 of again using Proposition 19.41 to check that the hypotheses 
of this theorem hold. Otherwise, E has good supersingular reduction at 5. As 
remarked at the end of $7J since 5 is unramified in Q(\/2), the Galois represen- 
tation ~p E 5 has the form given in Theorem 17.11 this theorem now implies that 
E is modular, as required. □ 

Remark 9.7 In fact, Q(\/2) is not the only real quadratic field for which all the 
numerology is valid to deduce modularity. Indeed, let F = Q(\/l7). Note that 
3 and 5 are inert in F. Again using PARI, one can verify that the class numbers 
of F((s) and F(($) are both 1, so that the analogue of Proposition 19.41 will 
hold also for F. (We suspect that this might be the only other real quadratic 
field with this property.) Next, the quadratic twist of Xq(15) to F is curve 
4335D3 in Cremona's tables, which has rank (and 4 points defined over Q), 
so that Xo(15) has rank over F. We can count the Q(vT7~)-rational points 
by counting the points in residue fields of F whose characteristic is a prime of 
good reduction for A"o(15). Since 13 and 43 both split in F, and Xq(15) has 16 
points in F13 and 40 points in F43, we see that the size of the torsion group of 
Xo(15) over F divides 8. Now one argues as in the case of Q(\/2) to see that 
all semistable elliptic curves over Q(\/l7) are modular. 

A The Honda system associated to a Raynaud 
scheme 

We describe the Honda system associated to a Raynaud scheme. We fix: 

k : a perfect field of odd characteristic p, 
W{k), v : its Witt ring and normalized valuation v (so v(p) = 1), 
a : the Frobenius automorphism a : W(k) > W(k). 

We also fix a finite field F of order p r , and we assume that there is an injection 
F <— > k of fields. There are r 'fundamental characters', indexed by a principal 
homogeneous space over Z/rZ. We recall the definition (Definition 1.1.1 of 20J): 
these are maps : F — > W(k) such that Xi\w x is a multiplicative character, 
Xi(0) = 0, and the composite 

F W(k) m ^ p k 

is a homomorphism of fields. 
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Given a multiplicative character x : F x ^ W(k) x , Raynaud defines a quan- 
tity lo x in W(k). Raynaud also defines, starting from a fundamental character, 
another quantity u> £ W(k) (which is then shown to be independent of the 
choice of fundamental character). We refer to equations 11 of [20] for the defin- 
ing relations, and we recall that (Proposition 1.3.1 of [20]): 

• Write x (uniquely) as a product over fundamental characters Yiiez/rZ X? 
with < Qi < p — 1. Then 



a\\ . . . a r \ (modp). 



u) = pi (modp 



2\ 



Given two multiplicative characters 

x'= n ^ and ^"^ n with o p-i 

ieZ/rZ iGZ/rZ 

and such that x'x" = Xi f° r some i G Z/rZ, we let h be the unique integer such 
that < h < r and 

a'i-h + a 'Lh = Pi 

a 'i-k + a 'Lk = P~ l for < k < h, 
a'j = a" =0 otherwise. 

Throughout we fix a Raynaud scheme G over SpecVT(fc), and we denote its 
coordinate ring by A. We also fix the following presentation of A : it is generated 
as a yy(fc)-algebra by Xi with i £ Z/rZ and relations 

Xf = SiX i+ i where v(8i) — or 1. 

We also set jj — oj/ Sj and denote by Xj the Tcichmiillcr lift of 7j . The comul- 
tiplication map A : A — ► A A is given by the formula 

A(x i )=x i ®i+i®x i + yi '" : in v " I ( n v 

3C'X"=X» X ' X " 

Theorem A.l Let G/s pcc w(k) be as above. Let M be the r- dimensional k- 
vector space with basis given by ei,i £ Z/rZ. Define Frobenius semi-linear maps 
F,V : M ► M by setting 

F(ei) = Sie l+1 and 
V(ej) = X^ei-i, 

on the basis elements e, and then extending semi-linearly. (So F(av) — a(a)F(v) 
and V(av) = o~ x (a)V(v) for a £ k.) Let L C M be the k-linear subspace of M 
spanned by Ai_iej, i £ Z/rZ. Then (L, M) is the Honda system associated to G. 
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Witt covectors 

For n > 0, set 

W n = W n (X , . . . , X n ) = xf + pxf' 1 +■■■+ p n X n . 
There are polynomials 

S„ e Z[lo, Yi, ■ ■ ■ ; Zq, Z\, . . .] 

where So = Y n + Z , and S„, for n > 1, satisfies the relation 

W n (S , Si, ... , S„) = W n (Y Q ,Y u ...,Y n ) + W n (Z , Z u ..., Z n ). 
We record the following for future use. 
Proposition A. 2 Modulo the ideal (p, Y" P , . . . , Y p _ 2 , Z p , . . . , Z p n _ 2 ), we have 

p- 1 yi zf-i 

S n (Yo, . . . , Y n ; Zq, . . . , Z n ) = Y n + Z n + — — — — + 



" ' YlZf 



£(-l)"- r ((*.-! + Zn-l) ■ ■ ■ (Xr+1 + Zr^r 1 E ' 
r=0 i=l 

Proof. We have 

VP I 7P CP VP 2 i 7P 2 CP 2 

r, _ ^ . J n-1 "T ^n-1 D n-1 . r n-2 ^n-2 °n-2 

"Jn - % T *n 1 I 7, h • • • 

Thus modulo Xf, i > 0, we have 

vP 1 7P QP 

I n-1 ' ^n-l D n-1 



Sn Y n -\- Z n 



P 



Assume the proposition for n — 1. The right hand side of the above relation, 
modulo (p, Xq, X p , . . .), is equal to 

v , 7 , Y n-1 + Z n-1 - (Yn-1 + ^n-l) P 
* n T &n 1 

P 

n-2 ( n-2 p-1 „ p _ 

+ Z^r 1 E (- 1 )"" 1 " r II « + E -ffefiv f ■ 

r=0 [ i=r+l i=l \ 

This proves the proposition. □ 

Definition A. 3 We define S_ n G F p [F_„, . . . , Yo! Z-n> ■ ■ ■ > ^0] to be the poly- 
nomial 

i— 1 v 7 

B-ir 1 ((y-i + • • • (t-h-i + z-^or 1 E -j^- 

We have S n (F_„, . . . , F ; Z_„, . . . , Z ) = S 7 ^ mod (p, y? 2 , . . . , y?„, . . . , Z p _ n ). 
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The following definition is due to Fontaine (|10j). 

Definition A. 4 For any finite fc-algebra R, the group of i?-valued Witt covec- 
tors CWk (R) is given by: 

• As a set, the elements of CWk(R) are sequences 

{(..., a_„, . . . , a_i, ao) : a_j € R is nilpotent for large i} . 

• For (a_ t )»>o,(M*>o G CW fc (i?), let 

C—n lim S m (^CL— n — m: . . . , &— n: b— n — m: . . . j b—ri). 

m — >oo 

The sequence (c_i)i>o € CWfe(i£), and the group law is 
(a_i)j>o + (6_i)j>o = (c_j)j>o. 

• The identity element is (. . . , 0, 0). These give CWk(R) the structure of a 
commutative group (Proposition 1.4, Chapter 11 of [TO]). 

CWk(R) has a natural structure of a VF(fc)-module which, for x € fc, is given 

by 

[x](. . . ,ffl-n, • ■ • , a_i,a ) = (. . . ,x p a- n ,...,x p a_i,xa ). 

Here, [x] is the Teichmiiller lift of x. The Frobenius and Verschiebung operators 
F, V : CW k {R) — > CWk(R) are given by 

F(...,a- n ,...,a-x,ao) d = (. . • , a v _ n , . . . , a p _ x , ag), and 
V(. ..,a_ n , ...,a_i,a ) = f (. . . , a_ n+ i, . . . , a_i). 

These are additive, and they satisfy the relation FV — VF = p. As for com- 
patibility with the 14 7 (fc)-module structure, one has Fa — a(a)F and Va — 
a^ 1 (a)V where a : W(k) — ► W(k) is the Frobenius. In other words, the Witt 
covectors CWk(R) form a module over the Dieudonne ring Dk — W(k)[F, V}. 

The Dieudonne module of the special fibre 

We now calculate the Dieudonne module associated to the special fibre Gk- We 
know that this is a vector space over k of dimension r. 

Following [TU], we need to calculate certain elements of A^-valued Witt cov- 
ectors. These elements are formal group homomorphisms from Gk to CWk- 
We will describe the 'homomorphism' condition shortly, but let us start with a 
candidate covector a = (. . . , a_„, . . . , ao). Since FV(sl) = pa. = 0, we must have 
a p _ n — for n > 1. The comultiplication map 

A: A k — ► A k ® k A k 

gives us an Ak ®k A^-valued Witt covector 

A(a) = (..., A(o_ n ),...,A(oo)). 
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In CWk(Ak <8>fc Ak), we also have the sum 

a®l + l®a=(. .., a_„ <g> 1, . . . , a ® 1) + (. . . , 1 ® a_„, . . . , 1 <g> a ). 
The 'homomorphism' condition is then 

A(a) = a<g>l + l®a. 

We now define covectors 

/ _„ _ 2 _ t _ t \ 

I ^ ' ' / 

\ n factors / 

for i e Z/rZ. Here we are viewing Xj and 7j modulo p (and so 7J is the mod 
p reduction of o" _n (7j))- We shall check (by a tedious, but entirely straightfor- 
ward, calculation) that e» satisfies the 'homomorphism' condition. Note that 
Fe n = (. . . , 0, . . . , 0, X£) as X? 7^ mod p implies 7„ = mod p. 
We write 1^ = Xi ® 1 and Zj = 1 ® Xj, and so 

e*®l = (...,7^1^-1,^), 
l®e 4 = (....TfJiZj-i.Zi). 
Lemma A. 5 • For any n > 0, we have 
7*-l7t-2 • ■ -7i-(n+i) = 

{(C) ■ • • (ic; • ■ ■ 7c;) p * (■*_-; ■ -icuy 

• For any n > r — 1, we /icwe 

A(Xi) = ^(e*® l;l<g>ei). 

• A(e») = e» ® 1 + 1 ® ej. 

Proof. The first part is a simple manipulation of symbols; the third part follows 
from the second (for example, apply the V operator). 

We now prove the second part of the lemma. Since Xk (resp. Yk,Zk,jk) is 
Xk+r (resp. Yfe +r , Zfe +r , 7fe +r ), it follows that the limit 

Jm S m (( 7 f_T • • • if I) Yi- m , ...,Yi; ( 7 t7 ' ' ' 7?-™) ■ • • , ^) 

is equal to 

S , _ r+ i(e i ® 1; 1 ® e,) = S- n (ei ® 1; 1 ® ej) for any n > r — 1. 
Using the first part, we see that SL r +i is equal to 

P- 1 vj 17V-3 

y 4 + z 4 + 7,_i > — — + 

r-2 /fc+1 \ / fc \ p-1 yj 7 p-j 
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Now 



p- 1 yP Z p ~^ 

{Y i _ 1 + z i _ l y- 1 ---{Y i _ k+l + z i _ k+1 y- 1 Y J ' 



„ \ r, \h \ h I »— 1 ' " r i-fe ^i-l 1 " " A 
• • • aj_fe!Oj_i! • • • Oj-fc! 



-fe 



where the sum is over 

fO < ai_i, . . . ,ai_fc+i < p- 1, l<ai-fc<p-l, and 
\aj_j + = p - 1, j = 1, . . . , fc - 1; ai-k + b^ k = p. 

The second part of the lemma easily follows. □ 

Lemma A. 6 The covectors ei, . . . ,e r are k-linearly independent. 

Proof. First suppose that one of the 7$ is divisible by p. Then each e n has only 
finitely many non-zero terms. Applying the V operator, one reduces the linear 
independence of ei, . . . , ei to the fc-linear independence of X\, . . . , X r , which is 
clear. 

In the remaining case, we have Ak = k[X\, . . . , X r ]/(Xf, . . . , X$). The Oth 
term of a\G\ H h a r e r is 

ot\X\ + • • • + a r X r + an clement of (Xi, . . . , X r ) 2 , 

and the lemma follows. □ 

It now follows that the fc-linear span of ei, . . . , e r , which is a subspace of the 
Dieudonne module of Gk, is in fact the whole Dieudonne module (as both are 
of dimension r).This gives the following proposition: 

Proposition A. 7 The Dieudonne module of Gk is the r- dimensional k-vector 
space 

ks\ CB * * * CB ks r 
with Frobenius and Verschiebung actions given by 

F(ei) = Sie i+1 , and 
V(e t ) = A?_ie;_i 

on the basis elements e i} i G Z/rZ, which one then extends semi-linearly. □ 

The Honda system associated to G 

We need to determine the kernel L of the composite 

M^CW k {Ak)^A K /pA 

where w is defined as follows: for (a_ n ) G CWk{Ak) 1 choose for each a_„ a lift 
a- n G A, and define 

. , de f 

w 



((a_„)) =' X! P""«-n mod M- 



ri>0 
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This is well-defined (see Chapter II, section 5.2 of |10|). 
Let Xj be the Teichmiiller lift of jj mod p. Note that as 



1- T 11 7«— 1 

and 

« (« pB " 1 +-+ 1 ) = (p»-l)/(p-l), 

we have 

for n > 2. It follows that 

tu(ei) = Xi + p~ 1 Aj_ i Zf_ j mod 

mod pA if Aj_i = 
OmodpA ifAi_i^0 ' 

Thus L contains the subspace of M spanned by the covectors Ai-ie*. Alter- 
natively, L contains the subspace generated by with p dividing <5j_i. Since 
FM is the fc-span of with p not dividing i, a dimension count shows that 
L is in fact the fc-span of A^-ie^. 
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